Jan Cholasta ce9eefe53b renew agent: respect CA renewal master setting ...

Do not bypass the renewal master check when a non-virtual profile is used
in dogtag-ipa-ca-renew-agent-submit.

This fixes dogtag-ipa-ca-renew-agent not respecting the CA renewal master
setting for certificates tracked with a real profile. (Note that there
currently aren't any such certificates tracked by us.)

Request the RA certificate using dogtag-submit rather than
dogtag-ipa-ca-renew-agent-submit as the CA renewal master setting is not
available so early in the install process.

https://pagure.io/freeipa/issue/5799

Reviewed-By: David Kupka <dkupka@redhat.com>
Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>

2017-05-15 12:14:28 +02:00

..

dogtag-ipa-ca-renew-agent-submit

renew agent: respect CA renewal master setting

2017-05-15 12:14:28 +02:00

ipa-server-guard

Refactor ipautil.run

2015-12-14 10:54:23 +01:00

Makefile.am

Build: remove incorrect use of MAINTAINERCLEANFILES

2016-11-16 09:12:07 +01:00